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ABSTRACT 



The present invention discloses an Internet billing method 
which can reject invalid orders with reliability, and which 
can be used without a credit card In the present invention, 
a terminal makes a requesi of a content server for a charge- 
able service by using, a prepaid information medium which 
has predetermined information necessary for transactions 
After the request, She content server makes a request of a 
prepaid information management server for authentication 
to check whether the prepaid information medium is autho- 
rized to be used for ihe chargeable service, and for billing for 
the prepaid information medium Then, Ihe prepaid infor- 
mation management server authenticates the prepaid infor- 
mation medium and performs the billing for the prepaid 
information medium on the basis of usage of the chargeable 
service. If the authentication and the billing succeed, the 
content server provides the chargeable service to the termi- 
nal. 

13 Claims, 9 Drawing Sheets 
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1 

METHOD AND SYSTEM FOR BOXING ON 
THE INTERNET 

BACKGROUND OF THE INVENTION 

1 Field of the Invention 5 
The present invention generally relates to a method, a 

system and a computer usable medium storing a program For 
billing on the internet, and, more particularly, to a method, 
a system and a computer usable medium storing a program J0 
for billing for a chargeable service oo the Internet 

2 Description of tbe Related Art 

As a billing system for a chargeable service on the 
Internet, there have been a system using a credit card, a 
members-only system for a specific service and so on. For 35 
using such systems, a user must become a member of tbe 
credit card or a member of the service provider Then, the 
user will be provided with service within a limited scope 
Also, there have been billing systems using prepaid cards 
As an example of such billing systems using prepaid cards, 20 
the Japanese laid-open patent application No. 9-251 494 dis- 
closes "a payment system using a virtual prepaid card." In 
the following, a general outline of the steps for a payment by 
this system will be described. 

(step 1) A general member's terminal makes a request of 2S 
a payment center of the system for a virtual prepaid card 
Then* the payment center provides (he general member with 
the virtual prepaid card after acknowledging receipt of 
money from the general member. For adding money to the 
payment server of the system, the general member may use so 
a credit card, may deposit into a predetermined bank account 
in connection with the payment server, or the like. 

(step 2) After obtaining the virtual prepaid card, the 
general member selects wanted goods from a list of goods, 
which list is sent from a shop member's terminal via a 35 
network, and displayed on the general member's terminal 
Then, the general member completes the order., 

(step 3) The general member sends a payment instruction 
(such as a transaction number), which is signed electroni- 
cally and encrypted, to the payment center from the general 40 
member's terminal . 

(step 4) After the payment center receives the payment 
instruction, it verifies the electronic signature and checks 
whether the instruction is really sent from an authorized A5 
general member, Then, the payment center checks a balance 
of the virtual prepaid card of the general member 

(step 5) If She procedures of step I-stcp 4 are complete 
correctly* the payment center sends a payment notice (such 
as a transaction number), which is signed electronically and 50 
encrypted, to the shop member's terminal. At the same lime, 
the payment center sends an updated balance of the virtual 
prepaid card to the general member's terminal As a result of 
this, the payment fxom the general member to the shop 
member is completed 55 

(step 6) The shop member's terminal which received the 
payment notice verifies the electronic signature and checks 
whether the notice is really sent from an authorized payment 
center Then, I he shop member sends the selected goods to 
the genera! member 60 

However, there are disadvantages of the above-mentioned 
systems, To use services provided by the above-mentioned 
systems, a isser must become a member of the credit card or 
a member of tbe service provider, Therefore, the number of 
users will be limited. Also, to become a member of the credit 65 
card or the service provider, one must disclose personal 
informatioo to the credit card provider or the service 
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provider, and cannot use the service without disclosing the 
personal information Further, tbe procedure for becoming a 
member is complicated and is not convenient. Furthermore, 
sending a credit card number on the Internet introduces a 
risk of interception and abuse of the credit card number by 
a third party. 

Also, in the above-mentioned '*a payment system using a 
virtual prepaid card/' after the completion of tbe order 
process between the general member's terminal and the shop 
members terminal, the payment center performs the pay- 
ment process in accordance with the instruction from the 
general member. Therefore, there is a disadvantage that the 
system receives an order from a general member's terminal 
without verification of the general member and balance of 
the virtual prepaid card. Accordingly, in the above- 
mentioned "a payment system using a virtual prepaid card," 
a fraudulent order by an ill-intentioned third party cannot be 
rejected Also, the system cannot reject an order from a 
general member's terminal even if the balance of the prepaid 
card of the member is not enough Further, the system 
cannot refuse an order even if tbe payment center is not 
operating 

SUMMARY OF THE INVENTION 

It is a general object of the present invention to provide an 
Internet billing method, system and a computer usable 
medium which can reject invalid orders with reliability, and 
which can be used without a credit card 

The above object of the present invention is achieved by 
an Internet billing method which makes billing on the 
Internet possible, wherein the method includes the steps of: 

making a request, by a terminal, of a content server for a 
chargeable service by using a prepaid information medium 
which has predetermined information necessary for trans- 
actions; 

making a request, by the content server, of a prepaid 
information management server for authentication to check 
whether the prepaid information medium is authorized to be 
used for the chargeable service, and for billing for the 
prepaid information medium; 

authenticating, by the prepaid information management 
server, tbe prepaid information medium; 

performing, by the prepaid information management 
server, the billing for the prepaid information medium on the 
basis of usage of the chargeable service; and 

providing the terminal, by the content server, with the 
chargeable service 

In the above Internet billing method, a password included 
in the predetermined information may be input to the 
terminal by a user instead of from the prepaid information 
medium 

The above object of the present invention is also achieved 
by an Internet billing method which makes billing on the 
Internet possible, the method including tbe steps of: 

making a request, by a terminal, of a content server for a 
service menu by using a prepaid information medium which 
has predetermined information necessary for transactions; 

sending the service menu to the terminal by the content 
server; 

making a request, by the terminal, of the content server for 
a chargeable service upon selecting needed service by a user; 

making a request, by the content server, of a prepaid 
information management server for authentication to check 
whether the prepaid information medium is authorized to be 
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used for the chargeable service, and for billing for the 
prepaid information medium; 

sending, by the terminal, to the prepaid information 
management server, an ID stored in the prepaid information 
medium upon receipt of a request from the prepaid in for- 5 
roatioo management server; 

sending information for authentication to the terminal by 
the prepaid information management server; 

performing a predetermined operation of concatenation of ]0 
the information and a password by the terminal; 

sending a result of the operation to the prepaid informa- 
tion management server; 

performing r by the prepaid information management 
server, the same operation as performed! in the terminal of 15 
concatenation of the information and the password of the 
prepaid information medium, which password is stored in a 
database, and authenticating the prepaid information 
medium by verifying a result of the operation against the 
result sent from the terminal; 20 

searching Lhe database for a balance of ihe prepaid card 
having the ID, and performing billing with reference to the 
balance, by the prepaid information management server; 

notifying the terminal of information including the bal- 
ance of the prepaid information medium by the prepaid 
information management server if both authentication and 
billing succeed; and 

providing, by the content server, the chargeable service to 
the terminal. 30 

In the Internet billing method T the password may be input 
to the terminal by a user instead of from the prepaid 
information medium. 

The above object of the present invention is achieved by, 
in an Internet billing system which makes billing on the 35 
Internet possible, in which system at least one terminal, at 
least one content server and at least one prepaid information 
management server are connected to a network, a method for 
controlling the terminal, the method including the steps of: 

accessing the content server on the basis of address 40 
information stored in a prepaid information medium which 
has predetermined information necessary for transactions, 
and making a request for a service menu; 

making a request of the content server for a chargeable 
service; 

sending, upon receipt of a request from the prepaid 
information management server, an ID stored in the prepaid 
information medium to the prepaid information manage- 
ment server; 5{} 

receiving information for authentication from the prepaid 
information management server, reading out a password 
stored in the prepaid information medium, performing a 
predetermined operation on concatenation of the informa- 
tion and the password, and sending a result of the operation 55 
to the prepaid information management server; and 

writing information including a balance of the prepaid 
information medium to the prepaid information medium on 
the basis of notification from the prepaid information man- 
agement server, 60 

The above object of the present invention is also achieved 
by, in an Internet billing system which makes billing on the 
Internet possible, in which system at least one terminal, at 
least one content server and at least one prepaid information 
management server are connected lo a network, a method for 65 
controlling ihe content server, the method including the 
steps of: 



45 



receiving a request for a service menu from the terminal 
on the basis of address information stored in a prepaid 
information medium which has predetermined information 
necessary for transactions, and sending the service menu to 
the terminal; 

receiving a request for a chargeable service from the 
terminal; 

making a request of the prepaid information management 
server for authentication by sending a message which 
includes an address of the terminal to the prepaid informa- 
tion management server, and for billing for the prepaid 
information medium by sending a number of points neces- 
sary for the chargeable service; and 

providing the chargeable service to the terminal if both the 
authentication and billing succeed 

The above object of the present invention is also achieved 
by t in an Internet billing system which makes billing on the 
Internet possible, in which system at least one terminal, at 
least one content server and at least one prepaid information 
management server are connected to a network, a method for 
controlling the prepaid information management server, the 
method including the steps of: 

receiving a request for authentication of a prepaid infor- 
mation medium, used at the terminal, which prepaid infor- 
mation medium has predetermined information necessary 
for transactioas t and for billing for the prepaid information 
medium; 

making a request for an ID stored in the prepaid infor- 
mation medium, and receiving the ID; 

sending information for authentication to the terminal; 

receiving a result of an operation performed by the 
terminal; 

performing the same operation as performed in the ter- 
minal by referring to a database which stores prepaid 
information, and authenticating the prepaid information 
medium by verifying a result of the operation against a result 
sent from the terminal; 

decrementing a balance of the prepaid information 
medium by necessary points if ihe authentication succeeds; 
and 

notifying the terminal of information which includes the 
decremented balance of ihe prepaid information medium 

The above object of the present invention is also achieved 
by an Internet billing system which makes billing on the 
Internet possible, the Internet billing system including at 
least one terminal, at least one content server and at least one 
prepaid information management server which arc con- 
nected to a network, 

wherein the terminal includes: 

a part for making a request of the content server for a 
chargeable service by using a prepaid information 
medium; 

wherein the content server includes: 

a part for making a request of the prepaid information 
management server for authentication to check whether 
the prepaid information medium is authorized to be 
used for the chargeable service; 

a part for making a request of the prepaid information 
management server for billing for the prepaid informa- 
tion medium; and 

a part for providing the chargeable service to the terminal; 
and 

wherein the prepaid information management server 
includes: 
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a pari for authenticating the prepaid information medium; 
and 

a part for performing the billing for the prepaid informa- 
tion medium on the basis of usage of the chargeable 
service 5 

The above object of the present invention is also achieved 
by an Interact billing system which makes billing on the 
Internet possible, the Inlemet billing system including at 
least one terminal, at least one content server and at least one 
prepaid information management server which are con- 30 
nccted to a network, 

wherein the terminal includes: 

a part for making a request of the content server for a 
chargeable service by using a prepaid information 
medium which has predetermined information neces- 35 
sary for transactions; 

a part for sending an ID stored in the prepaid information 
medium upon receipt of a request from the prepaid 
information management server; 

a part for reading out a password stored in the prepaid 20 
information medium on the basis of information for 
authentication received from the prepaid information 
management server, performing a predetermined 
operation and sending a result of the operation to the 
prepaid information management server; and 

a part for writing information including a balance of the 
prepaid information medium to the prepaid information 
medium on the basis of notification from the prepaid 
information management server; 

wherein ihe content server includes; 

a part for making a request of the prepaid information 
management server for authentication io check whether 
ihe prepaid information medium is authorized to be 
used for the chargeable service; 

a part for making a request of the prepaid information 
management server for billing for the prepaid informa- 
tion medium; and 

a part for providing the chargeable service to the terminal 
if both authentication and billing succeed; and 

wherein the prepaid information management server 
includes: 

a part for authenticating the prepaid information medium 
at the terminal upon receipt of a request for authenli- 
catiorj from the content server; 

a part for performing the billing on the basis of usage of 
the chargeable service; and 

a part for notifying the terminal of information including 
the balance of the prepaid information medium. 

The above object of ihe present invention is also achieved 
by an article of manufacture including a computer usable 
medium having compute r-re ad able code means embodied 
therein for causing, in an Internet b tiling system which 
makes billing on the Internet possible, in which system at 
least one terminal, at least one content server and at least one 
prepaid information management server are connected to a 
network, a computer to control the terminal, the computer 
readable code means including; 

computer-readable program code means for accessing the 
content server on the basis of address information stored in &0 
a prepaid information medium which has predetermined 
information necessary for transactions, and making a request 
for a service menu; 

computer-readable program code means for making a 
request of the content server for a chargeable service; &5 

computer-readable program code means for sending, 
upon receipt of a request from the prepaid information 
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management server, an ID stored in the prepaid information 
medium to Ihe prepaid information management server; 

computer-readable program code means for receiving 
information for authentication from the prepaid information 
management server, reading out a password stored in the 
prepaid information medium, performing a predetermined 
operation of concatenation of ihe information and Lhe 
password, and sending a result of the operation to the 
prepaid information management server; and 

computer-readable program code means for writing infor- 
mation including a balance of the prepaid information 
medium to the prepaid information medium on the basis of 
notification from the prepaid information management 
server, 

The above object of the present invention is achieved by 
an article of manufacture including a computer usable 
medium having computer-readable code means embodied 
therein for causing, in an Internet billing system which 
makes billing on the Internet possible, in which system at 
least one terminal, at least one content server and at least one 
prepaid information management server are connected to a 
network, a computer to control the content server, the 
computer readable code means including: 

computer-readable program code means for receiving a 
request for a service menu sent from the terminal on the 
basis of address information stored in a prepaid information 
medium which has predetermined information necessary for 
transactions, and sending lhe service menu to the terminal; 

computer-readable program code means for receiving a 
request for a chargeable service from the terminal; 

computer-readable program code means for making a 
request of the prepaid information management server for 
authentication by sending a message which includes an 
address of the terminal to ihe prepaid information manage- 
ment server; 

computer-readable program code means for billing for the 
prepaid information medium by sending a point number 
necessary for the chargeable service; and 

computer-readable program code means for providing the 
terminal with the chargeable service if both authentication 
and billing succeed. 

The above object of the present invention is also achieved 
by an article of manufacture including a computer usable 
medium having computer-readable code means embodied 
therein for causing, in an Internet billing system which 
makes billing on the Internet possible, in which system at 
least one terminal, at least one content server and at least one 
prepaid information management server are connected to a 
network, a computer to control the prepaid information 
management server, the computer readable code means 
including: 

computer-readable program code means for receiving a 
request for authentication of a prepaid information medium, 
used at the terminal, which prepaid information medium has 
predetermined information necessary for transactions, and 
for billing for the prepaid information medium; 

computer-readable program code means for making a 
request for an ID stored in ihe prepaid information medium, 
and receiving the ID; 

computer-readable program code means for sending 
information for authentication to the terminal; 

computer-readable program code means for receiving a 
result of an operation performed by the terminal; 

computer-readable program code means for performing 
the same operation as performed in the terminal by referring 
to a database which stores prepaid information, and authen- 
ticating the prepaid information medium by verifying a 
result of the operation against the result sent from the 
terminal; 
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computer-readable program code means for decrementing 
a balance of the prepaid information medium by necessary 
points if ihe authentication succeeds; and 

computer-readable program code means for notifying ihe 
terminal of information which includes ihe decremented 5 
balance of the prepaid information medium. 

The above object of ihe present invention is also achieved 
by an IC card, in an Internet billing system which makes 
billing on the Internet possible, in which system at least ooe 
terminal, at least one content server and at least one prepaid 1Q 
information management server are connected to a network, 
the IC card including: 

a part for connecting to the terminal; 

predetermined information, which includes a password, 
necessary for transactions; 

a part for retrieving information on authentication of the 
IC card from the prepaid information management server; 
and 

a pari for performing a predetermined operation on ihe 
password and the retrieved information, n(} 

wherein the terminal sends a result of the operation to the 
prepaid information management server, and the prepaid 
information management server authenticates the IC card by 
performing the same operation as performed in the IC card 
and by verifying a result of the same operation against ihe ^ 
result of the operation performed in the IC card. 

According to the present invention, the content server 
receives a chargeable service request from me terminal only 
when the authentication and billing are completed 
successfully, so that the content server can reject invalid 3Q 
orders with reliability 

Also, according to the present invention, secret informa- 
tion of the prepaid information medium such as the pass- 
word can be reliably prevented from being obtained by an 
invalid content server, 35 

Further, the prepaid information management server 
writes the balance and the date and time of use of service if 
the authentication and billing are completed successfully, so 
that a user of the prepaid information medium can know the 
balance and the history of use on the terminal without ^ 0 
accessing the prepaid information management server. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Other objects, features and advantages of the present 
invention will become more apparent from the following 
detailed description when read in conjunction with the A5 
accompanying drawings, in which: 

FIG, 1 is a sequence chart for explaining a general outline 
of an operation of an Internet billing system of the present 
invention; 

FIG 2 is a connection block diagram of an Internet billing 
system according to an embodiment of the present inven- 
tion; 

FIG 3 is an example of a table within a database of a card 
management server of an Internet billing system according 
to an embodiment of the present invention; 

FIG 4 is a block diagram of an Internet billing system 
according to an embodiment of the present invention; 

FIG. 5 is a sequence chart for explaining a series of 
operations of an Internet billing system of the present 60 
invention; 

FIG. 6 is a flowchart for explaining an operation of a 
terminal according to an embodiment of the present inven- 
tion; 

FIG. 7 is a flowchart for explaining an operation of a 65 
content server according to an embodiment of the present 
invention; 
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FIG S is a flowchart for expfaining an operation of a card 
management server according to an embodiment of the 
present invention; 

FIG., 9 is a block diagram of a computer system for 
explaining an embodiment of a computer usable medium 
according to the present invention; 

FIG, 10 is a block diagram of an I C card according to an 
embodiment of the present invention; 

DETAILED DESCRIPTION OF THE 
PREFERRED EMBODIMENTS 

A prepaid information medium which is used when a user 
makes a request for a service to a content server will be 
called a "prepaid card" hereinafter but the form of the 
prepaid information medium is not limited to a card. Also, 
a prepaid information management server will be called "a 
card management server" hereinafter, but the server can 
manage various information other than card information 

The prepaid card is distributed and managed, for example, 
by a card management company. A user buys the prepaid 
card in order to utilize a service., In the prepaid card, 
information on a content server address, a card ID, a card 
password and so on, are stored, A remaining amount or 
remaining points for using available service are managed by 
a prepaid information management server, that is to say, a 
card management server 

A general outline of an operation of the Internet billing 
system of the present invention will now be described with 
reference to FIG 1 . 

In step 101, a request for a chargeable service is sent from 
the terminal to ihe content server on the basis of address 
information (for example, URL. on HTTP) of the content 
server stored in the prepaid card (IC card, Hoppy disk, 
magnetic card, and so on) The content server, in step 102, 
makes a request for authentication and billing to the card 
management server, then, in step 103, the card management 
server authenticates the prepaid card at the terminal, and in 
step 104, sends the result of the authentication and billing to 
the content server. If the authentication and the billing are 
successfully completed, the content server, in step 105, 
provides the terminal with the chargeable service 

FIG 2 is a connection block diagram of an Internet billing 
system according to an embodiment of the present inven- 
tion. A terminal 100 sets a connection 11 to a content server 
200 via the Internet 400 and makes a request for a chargeable 
service by using the connection 11, After receiving the 
chargeable service request from the terminal 100, the con- 
tent server 200 sets a connection 12 to a card management 
server 300 and makes a request of the card management 
server 300 for authentication and billing of the prepaid card 
by sending information including an IP address of the 
terminal 100 

After receiving the authentication and billing request from 
the content server 200, the card management server 300 sets 
a connection 13 to the terminal 100 and makes a request of 
the terminal 100 for an operation on the password of the 
prepaid card The terminal 100 sends the result of the 
operation to the card management server 300 by using the 
connection 13. The card management server 300 has a card 
management database 500 storing card IDs, passwords and 
balances of each card. An example of data within the 
database 500 is shown in FIG 3 The card management 
server 300 retrieves the password of the user ID from the 
database and performs the same operation on the password 
as performed in the terminal 100 If the result of the 
operation by the card management server 300 matches the 
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result of the operation by the terminal 100, the authentica- 
tion is successful After She authentication and billing by the 
card management server 300, the card management server 
300 notifies the content server 200 of the result of the 
authentication and billing If the authentication and billing 5 
are successfully completed T the content server 200 starts 
providing the chargeable service to the terminal 100,, If the 
authentication or billing is not successfully completed, the 
content server 200 notifies the terminal 100 by using ihe 
connection 11 that the prepaid card is not available for use ^ 

In the following, a configuration of an Internet billing 
system will be described, FIG. 4 is a block diagram of an 
Internet billing system according to aa embodiment of the 
present invention As shown in FIG. 4, the Internet billing 
system has a terminal 100, a content server 200 and a card 15 
management server 300, The terminal 100 accesses the 
content server 200 on the basis of content server address 
information stored in the prepaid card and makes a request 
for a chargeable service. The content server 200 provides the 
service upon receipt of the request from the terminal 100. ^ Q 
The card management server 300 authenticates and bills the 
prepaid card upon receipt of a request from the content 
server 200. 

The terminal 100 has a service request part 101 and a card 
management part 102 Hie service request part 101 auto- 2 5 
matically sets a connection to the content server 200 on ibc 
basis of the content server address information (such as 
URL) stored in the prepaid card and makes a request Ibr a 
chargeable service The service request part 101 may be 
embodied, for example, by a WWW browser. The card 30 
management part 102 is connected to a prepaid card 103 via 
a reader suitable for the prepaid card 103 and sends a card 
ID stored in the prepaid card 103 upon receipt of a request 
from the card management server 300 Also, the card 
management part 102 reads out secret information (such as 35 
a password) from the prepaid card 103 upon receipt of a 
request from the card management server 300, and sends the 
information to the card management server 300 after per- 
forming an operation of r for example, one-way function on 
the information.. Further, the card management part 102 40 
writes a balance and a date and lime of the use of the prepaid 
card 103 to the prepaid card 103 upon receipt of a notifi- 
cation from the card management server 300 

The content server 200 has an authentication request part 
201, a billing process request part 202, a service providing 45 
part 203, and a card management part 204 The authentica- 
tion request part 201 , upon receipt of a chargeable service 
from the terminal 100, makes a request of the card manage- 
ment server 300 for authentication which confirms the 
vaiidily of the prepaid card The billing process request part 50 
202 makes a request of the card management server 300 for 
billing of the prepaid card The service providing part 203, 
if both the authentication and the billing are successful, 
provides a chargeable service to the terminal 100 The card 
management part 204 makes a request of the authentication 55 
request part 201 and the billing process request part 202 for 
authentication and billing of the prepaid card 

The card management server 300 has a authentication part 
301, a billing process part 302 and a card management 
database 303 The authentication part 301* upon receipt of a 60 
request for authentication, authenticates the prepaid card at 
the terminal 100 The billing process part 302 bills the 
prepaid card on the basis of the usage of the chargeable 
service T and notifies the terminal 100 of a balance and a date 
and lime of use of the prepaid card 103 The card manage- 65 
ment database 303 stores information on prepaid cards such 
as card IDs, passwords, and balances, 



In the following, the operation of the above-mentioned 
Internet billing system will be described. FIG 5 is a 
sequence chart for explaining a series of operations of the 
Internet billing system of the present invention, In the 
sequence chart, the Challenge Response method defined in 
the RFC 1334 (W Simpson, "PPP Challenge Handshake 
Authentication Protocol (CHAP)", August 1996) will be 
used as an example of a distribution and authentication 
method for chargeable video service,, 

In step 201, the terminal 100, by using content server 
address information (such as URL.) stored in the prepaid 
card 103 sets a connection to the content server 200 which 
has the address and makes a request for a service menu In 
step 202, the content server 200 sends a service menu such 
as a video program list to the terminal 100 after the setup of 
the connection, In step 203, if a user selects u service from 
the service menu, a service request message is sent to the 
content server 200. The needed number of points for the 
selected service may be included in the request message 
The content server, in step 204, sets a connection to the card 
management server 300, and sends t as a request for authen- 
tication which confirms the validity of the prepaid card, an 
authentication request message in which an IP address of the 
terminal 100 is included by using the connection lo the card 
management server 300 At the same time, the content server 
200 sends a billing request message including the number of 
points of the service lo the card management server 300. The 
authentication request message and the billing request mes- 
sage may be Lhe same one message or separate messages In 
step 205, the card management server 300 sets a connection 
to the terminal 100 on the basis of the IP address of the 
terminal 100 in the received authentication request message 
and makes a request for a card ID of the prepaid card to the 
terminal 100 by using the connection. The terminal 100 
sends, in step 206, lhe card ID stored in the prepaid card 103 
to the card management server 300 The card management 
server 300, in step 207 ? sends a random number (challenge) 
for authentication to the terminal 100 by using lhe connec- 
tion The random number varies from authentication to 
authentication In step 20#, the terminal 100 which receives 
the random number performs an operation of one-way 
function, for example, MD5" (Rivesi R, and S Dusse, i£ The 
MD5 Message-Digest Algorithm/' April 1992) of concat- 
enation of the random number and the password.. Then, lhe 
terminal 100 sends a reply message (Response) including 
the result of the operation to the card management server 
300 In step 209, the card management server 300 performs 
the same one-way function operation of concatenation of the 
password and the random number. In this time, the password 
is retrieved from ihe card management database 500. The 
card management server 300 verifies the result of the 
operation against the reply from the terminal 100 If they 
match, the authentication succeeds, if not, the authentication 
falls. 

As mentioned above, the card management server 300 
uses the random number which varies in each aulhentication 
of the prepaid card Therefore, even if a third party intercepts 
a random number during the challenge session, the third 
party cannot fake lhe terminal 100 by using the random 
number another time. Furmer, because the result of the 
operation of the one-way function is used for the response 
session, the original password cannot be estimated even if a 
third party intercepts the response. 

In step 210, the card management server 300 searches the 
database for the balance of the prepaid card 103 having the 
card ID, If the balance of Ihe prepaid card 103 is larger than 
the number of points included in the billing request message, 
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the card management server 300 decrements the balance by 
the Dumber of points If the balance of the prepaid card is 
smaller than the number of points included to the billing 
request message, the billing cannot be completed and the 
process terminates In step 211, the card management server 5 
300 notifies the terminal 100 of ihe balance of the prepaid 
card 103 and the date and time of utilizing Ihe service,. The 
card management server 300, in step 212, notifies ihe 
content server 200 of the result of the authentication and 
billing. If the authentication or billing fails, the process 0 
terminates In step 213, the content server 200 provides a 
chargeable service to the terminal 100 

FIG. 6 is a flowchart for explaining an operation of the 
terminal 100 according to an embodiment of the present 
invention The operation of the terminal 100 will be 15 
described in the following, 

In step 301 T the terminal 100, by using an address infor- 
mation stored in the prepaid card 103, sets a connection to 
the cootent server 200 and makes a request for a service 
menu. In step 302, the terminal 100 sends to the content 2Q 
server 200 a service request message which includes the 
needed number of points. In step 303, the terminal 100 sends 
a card ID stored in the prepaid card to the card management 
server 300 upon receipt of a request from the card manage- 
ment server 300. Upon a request from the card management 2 5 
server 300, in step 304, the terminal 100 reads out secret 
information (such as a password) stored in the prepaid card 
and after performing an operation of, for example, one-way 
function, on the secret information, sends the operated-on 
information to the card management server 300. If the 30 
authentication and the billing succeed, in step 305, the 
terminal 100 writes the balance and the date and time of use 
to the prepaid card 103 upon receipt of Ibis information from 
the card management server 300. In step 306, the terminal 
100 receives the chargeable service. If the authentication or 35 
the billing fails, the chargeable service will not be provided 
to ihe terminal 100 (in step 307) 

The operation of the content server will be described in 
the following by using FIG 7 FIG.. 7 is a flowchart of the 
operation of the content server according to an embodiment ad 
of the present invention . In step 401, the content server 200 
receives a request for a service menu from the terminal 100, 
and sends a menu list !o the terminal 100. The content server, 
in step 402, receives a chargeable service request from the 
terminal 100 In step 403, the content server may set a card 45 
ID in a card ID part of an authentication and billing message, 
the terminal address in a terminal address part of the 
message and the needed points for the service in a service 
point part of the message, Then, the content server 200 
makes a request for authentication and billing of the prepaid 50 
card 103 by sending the message to the card management 
server 300. Id this embodiment, because the card manage- 
raent server 300 makes a request for a card ID of the prepaid 
card to the terminal 100, the content server may not set a 
card ID.. In other embodiments, the terminal 100 may send 55 
the card ID when the terminal 100 makes a request of the 
content server 200 for the chargeable service, or, the termi- 
nal 100 may send the card ID to the content server 200 on 
the basis of a request from the content server 200. In these 
cases, the content server sets the card ID, If both the go 
authentication and billing succeed (in step 404), the content 
server 200 starts providing the chargeable service to the 
terminal 100 in step 405.. If the authentication or billing fails 
(in step 404), the content server notifies the terminal 100 of 
the failure of the authentication or billing (in step 406). as 

HG. 8 is a flowchart of ihe operation of the card man- 
agement server according to an embodiment of the present 



invention. The operation of the card management server 300 
will be described with reference to FIG, H in the following. 

In step 501, the card management server receives the 
authentication and billing request message of the prepaid 
card 103 from the content server 200, If the card ID is not 
set in the message, the card management server 300, in step 
501-1, sets a connection to the terminal 100 on ihe basis of 
the IP address of the terminal 100 in the received authenti- 
cation and billing request message makes a request for the 
card ID to the terminal 100 by using the connection Then, 
the card management server 300 receives the card ID from 
the terminal 100 as a response of the request. If the card ID 
is set in the message in the step 501, or after the step 501-1, 
the card management server 300, in step 502, sets a con- 
nection to the terminal 100 on the basis of the IP address of 
the terminal 100 in the received authentication and billing 
request message if there is no connection to the terminal 
100, and sends a random number (challenge) for authenti- 
cation by using the connection to the terminal 100. The 
random number varies from authentication to authentication. 
In step 503, the card management server 300 receives a reply 
(Response) from the terminal 100 and performs the same 
one-way function operation as performed in the terminal of 
concatenation of the password and the random number The 
password is retrieved from the card management database 
500 The card management server 300 verifies the result of 
the operation against the reply from the terminal 100, If they 
match, the authentication succeeds; if not, the authentication 
fails,, 

If the authentication and billing succeed and the balance 
of the prepaid card 103 is larger than the needed number of 
service points, which number is included io the billing 
request message (in steps 504 and 505), the card manage- 
ment server 300 decrements the balance by the number of 
service points in step 506. If the authentication fails (in step 

504) , the process terminates If the balance of the prepaid 
card is smaller than the number of service point (in step 

505) , the billing becomes impossible In step 507, the card 
management server 300 notifies the terminal 100 of the 
decremented balance of the prepaid card 103 and the date 
and time of using the service In step 508, the card man- 
agement server 300 notifies the content server of the result 
of the authentication and billing 

In the above-mentioned embodiment, other authentication 
methods can be used 

Further, as chargeable services which can be provided to 
the terminal, there are, for example, a program download 
service, on-line shopping and so on.. Examples of the form 
of the prepaid card are an IC card, a floppy disk, a magnetic 
disk, and so on . Also, in the above-mentioned embodiment, 
a user may input ihe password manually instead of using the 
password stored in the prepaid card. Further, the content 
server may make a request of the card management server 
for billing after the authentication of the prepaid card 
succeeds, Furthermore, the prepaid card may store an 
amount of money, points, and various other prepaid infor- 
mation . 

In the following, a computer usable medium of the present 
invention will be described. FIG. 9 is a block diagram of a 
computer system. The computer system comprises a CPU 
400, a memory 401, an externa] storage unit 402, a display 
403, a keyboard 404, and a communication processing 
device 405. The computer usable medium of the present 
invention corresponds to the memory 401 and/or the exter- 
nal storage device 402. The program carrying out above- 
mentioned processes is stored in the memory 401 aod/or the 
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external storage unit 402, and is run on the CPU 41)0, and 
then the processes of the embodiment are carried out. 
Further, the computer usable medium of the present inven- 
tion is embodied by an electronic memory, a hard disk, or by 
a transportable medium such as a floppy disk, a CD-ROIvf, 5 
a magnetic tape and so on. By loading the program for 
controlling the terminal stored in the medium into a com- 
puter system, by loading the program for controlling the 
content server into another computer system, and by loading 
the program for controlling the card management server into 10 
yet an other computer system, these computer systems can 
be used as the Internet billing system of the present inven- 
tion. In this case, the computer system used for the terminal 
has a prepaid card reader. The reader may be an IC card 
reader, a Soppy disk drive and so on, the selection of which 15 
depends oo the form of the prepaid card- 

An example of an IC card of the present invention is 
shown in FIG 10 The IC card 600 is, for example, a plastic 
card in which an IC 601 is embedded, In the IC 601, data and 
a program for the above-mentioned operation are stored, and 20 
the operation on the password and the random number is 
performed within ibe IC 601. Because the password of its 
original form wiil not flow out of the IC card, a high-level 
security will be retained 

As mentioned above t according to the present invention, 25 
the content server receives a chargeable service request from 
the terminal only when the authentication and billing are 
completed successfully. Therefore* the content server can 
reject invalid orders with reliability 

Also, according lo the present invention, the content 
server sends the address information of the terminal to the 
card management server, and then the card management 
server can authenticate the prepaid card in the terminal by 
accessing the terminal directly. Therefore, secret inforraa- ^ 
tion of the prepaid card such as the password can be reliably 
prevent from being obtained by an invalid content server 

Further, the card management server writes the balance 
and the dale and time of use of service if the authentication 
and billing are completed successfully Therefore, the user of AQ 
the prepaid card can know the balance and the history of use 
on the terminal without accessing the card management 
server, 

As mentioned above, an application of the present inven- 
tion is not limited lo the prepaid card The present invention 45 
applies lo, for example, payment by using a point card such 
as a mileage card provided by airlines In the case of a 
mileage card T accumulated points by using an airline are 
stored in a database of the card management server. Same as 
in the case of the prepaid card, a user can use a chargeable 50 
service provided by the content server through the use of the 
points stored in the database of the card management server, 
Furthermore, the present invention is applicable to payment 
systems using point cards adopted in various industries other 
than airlines, such as, department stores, hotels, sales of 55 
various materials (CD, video, game software and so on), 
video/CD rental, supermarkets, sales of home electrical 
products, gas stations, etc 

The present invention is not limited to the specifically 
disclosed embodiments, and variations and modifications go 
may be made without departing from the scope of the 
invention. 

What is claimed is: 

1 An Internet billing method which makes billing on the 
Internet possible, said method comprising the steps of: &$ 
making a request, by a terminal, of a content server for a 
chargeable service by using a prepaid information 



medium which has predetermined information neces- 
sary for transactions; 

making a request, by said content server, of a prepaid 
information management server for authentication to 
check whether said prepaid information medium is 
authorized fo be used for said chargeable service, and 
for billing for said prepaid information medium; 

sending, by said terminal, lo said prepaid information 
management server, an ID stored in said prepaid infor- 
mation medium upon receipt of a request from said 
prepaid information manage me nt server; 

sending information for authentication to said terminal by 
said prepaid information management server; 

performing a predetermined operation for a concatenated 
value of said information and a password which is read 
from said prepaid information medium by said termi- 
nal; 

sending a result of the operation to said prepaid informa- 
tion management server; 

performing, by said prepaid information management 
server, the same operation as performed in said termi- 
nal of the concatenated value of said information and 
said password of said prepaid information medium, 
which password is stored in a database, and authenti- 
cating said prepaid information medium by verifying a 
result of the operation against the result sent from said 
terminal; 

performing, by said prepaid information management 
server, ibe billing for the prepaid information medium 
on the basis of usage of the chargeable service; and 

providing said terminal, by said content server, with said 
chargeable service 

2 The Internet billing method as claimed in claim 1, 
wherein a password included in said predetermined infor- 
mation is input to said terminal by a user instead of from said 
prepaid information medium. 

3 , An Internet billing method which makes billing on the 
Internet possible, said method comprising the steps of: 

making a request, by a terminal, of a content server for a 
service menu by using a prepaid information medium 
which has predetermined information necessary for 
transactions; 

sending the service menu to said terminal by said content 
server; 

making a request, by said terminal, of said content server 
for a chargeable service upon selecting needed service 
by a user; 

making a request, by said content server, of a prepaid 
information management server for authentication to 
check whether said prepaid information medium is 
authorized to be used for said chargeable service, and 
for billing for said prepaid information medium; 

sending, by said terminal, to said prepaid information 
management server, an ID stored in said prepaid infor- 
mation medium upon receipt of a request from said 
prepaid information management server; 

sending information for authentication lo said terminal by 
said prepaid information management server; 

performing a predetermined operation for a concatenated 
value of said information and a password by said 
terminal; 

sending a result of the operation to said prepaid informa- 
tion management server; 

performing, by said prepaid information management 
server, the same operation as performed in said termi- 
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nal of the concatenated value of said information for 
authentication and said password of said prepaid infor- 
mation medium, which password is stored in a 
database, and authenticating said prepaid information 
medium by verifying a result of the operation against 
the result sent from said terminal; 

searching the database for a balance of the prepaid infor- 
mation medium having said ID, and performing billing 
with reference to the balance, by the prepaid informa- 
tion management server; 

notifying said terminal of information including the bal- 
ance of said prepaid information medium by said 
prepaid information management server if both authen- 
tication and billing succeed; and 

providing T by said content server, said chargeable service 
to said terminal 

4 The Internet bitting method as claimed in claim 3, 
wherein said password is input to said terminal by a user 
instead of from said prepaid information medium, 

5 A method, in an Internet billing system which makes 
billing on the Internet possible, in which system at least one 
terminal, at least one content server and at least one prepaid 
information management server are connected to a network, 
for controlling said terminal* said method comprising the 
steps of: 

accessing said content server on the basts of address 
information stored in a prepaid information medium 
which has predetermined information necessary for 
transactions, and making a request for a service menu; 

making a request of said content server for a chargeable 
service; 

sending, upon receipt of a request from said prepaid 
information management server, an ID stored in said 
prepaid information medium to said prepaid informa- 
tion management server; 

receiving information for authentication from said pre- 
paid information management server, reading out a 
password stored in said prepaid information medium, 
performing a predetermined operation for a concat- 
enated value of said information for authentication and 
the password, and sending a result of the operation to 
said prepaid information management server; 

writing Information including a balance of said prepaid 
information medium to said prepaid information 
medium on the basis of notification from said prepaid 
information management server; and 

wherein said prepaid information management server 
performs the same operation as performed in said 
terminal of the concatenated value of said information 
for authentication and said password, which password 
is stored in a database, and authenticating said prepaid 
information medium by verifying a result of the opera- 
tion against the result sent from said terminal 

6 A method, in an Internet billing system which makes 
billing on the Internet possible, in which system at least one 
terminal, at least one content server and at least one prepaid 
information management server are connected to a network, 
for controlling said content server, said method comprising 
the steps of: 

receiving a request for a service menu from said terminal 
on the basis of address information stored in a prepaid 
information medium which has predetermined infor- 
mation necessary for transactions, and sending the 
service menu to said terminal; 

receiving a request for a chargeable service from said 
terminal; 
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making a request of said prepaid information management 
server for authentication of the prepaid information 
medium by sending a message which includes an 
address of said terminal to said prepaid information 
management server^ and for billing for said prepaid 
information medium by sending a number of points 
necessary for the chargeable service; 

providing said chargeable service to said terminal if both 
the authentication and billing succeed; 

wherein, after the step of making a request of said prepaid 
information management server for authentication, said 
prepaid information management server makes a 
request of said terminal to send an ID stored in said 
prepaid information medium; 

said terminal sending said ID to said prepaid information 
management server; 

said prepaid information management server sending 
information for authentication lo said terminal; 

said terminal performing a predetermined operation for a 
concatenated value of said information for authentica- 
tion and a password which is read from said prepaid 
inform ation medium, and 

sending a result of the operation to said prepaid informa- 
tion management server; and 

said prepaid information management server performing 
the same operation as performed in said terminal of the 
concatenated value of said information for authentica- 
tion and said password, which password is stored in a 
database* and authenticating said prepaid information 
medium by verifying a result of the operation against 
the result sent from said terminal. 

7. A method, in an Internet billing system which makes 
billing on the Internet possible, in which system at least one 
terminal, at least one content server and at least one prepaid 
information management server are connected to a network, 
for controlling said prepaid information management server, 
said method comprising the steps of: 

receiving a request for authentication of a prepaid infor- 
mation medium, used at said terminal^ which the pre- 
paid information medium has predetermined informa- 
tion necessary for transactions, and for billing for said 
prepaid information medium; 

making a request for ao ID stored in said prepaid infor- 
mation medium, and receiving the ID; 

sending information for authentication to said terminal, 
wherein said terminal performs a predetermined opera- 
tion for a concatenated value of said information for 
authentication and a password and sends a result of the 
operation to said prepaid information management 
server; 

receiving the result of the operation performed by said 
terminal; 

performing the same operation as performed in said 
terminal by referring to a database which stores prepaid 
information, and authenticating said prepaid informa- 
tion medium by verifying a result of the operation 
against the result sent from said terminal; 

decrementing a balance of said prepaid information 
medium by necessary points if the authentication suc- 
ceeds; and 

notifying said terminal of information which includes the 
decremented balance of said prepaid information 
medium, 

8 An Internet billing system which makes billing on the 
Internet possible, said Internet billing system comprising at 
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least otic terminal, at least one content server and at least one 
prepaid informal ion management server which are con- 
nected to a network, 

wherein said terminal comprises: 

means for making a request of said content server for 5 
a chargeable service by using a prepaid information 
medium; 

wherein said content server comprises: 

means for making a request of said prepaid informalion 
management server for authentication to check 30 
whefher said prepaid information medium is autho- 
rized to be used for said chargeable service; 

means for making a request of said prepaid informalion 
management server for billing for said prepaid infor- 
mation medium; and 35 

means for providing said chargeable service to said 
terminal; and 

wherein said prepaid information management server 
comprises: 

means for authenticating said prepaid information 20 
medium; and 

means for performing the billing for said prepaid 
information medium on the basis of usage of said 
chargeable service; 

wherein, when authenticating said prepaid information 
medium, said prepaid information management server 
makes a request of said terminal to send an ID stored 
in said prepaid information medium; 

said terminal sending said ID to said prepaid information 3Q 
management server; 

said prepaid informalion management server sending 
information for authentication to said terminal; 

said terminal performing a predetermined operation for a 
concatenated value of said information for authentica- 35 
tfon and a password which is read from said prepaid 
information medium, and sending a result of the opera- 
tion to said prepaid information management server; 
and 

said prepaid information management server performing 40 
the same operation as performed in said terminal of the 
concalenaling value of said information for authenti- 
cation and said password, which password is stored m 
a database, and authenticating said prepaid information 
medium by verifying a result of the operation against 45 
the result sent from said terminal, 
9 An Internet billing system which makes billing on the 
Internet possible, said Internet billing system comprising at 
least one terminal, at least one content server and at least one 
prepaid information management server which are con- 50 
nected to a neLwork, 

wherein said terminal comprises: 

means for making a request of said content server for 
a chargeable service by using a prepaid information 
medium which has predetermined information nec- 55 
essary for transactions; 
means for sending an ID stored in said prepaid infor- 
mation medium upon receipt of a request from said 
prepaid information management server; 
means for reading out a password stored in said prepaid 60 
informalion medium on the basis of information for 
authentication received from said prepaid informa- 
tion management server, performing a predeter- 
mined operation and sending a result of the operation 
to said prepaid information management server; and 65 
means for writing information including a balance of 
said prepaid informalion medium to said prepaid 



information medium on Ihe basis of notification from 
said prepaid information management server; 
wherein said content server comprises: 

means for making a request of said prepaid information 
management server for authentication to check 
whether said prepaid information medium is autho- 
rized to be used for said chargeable service; 

means for making a request of said prepaid information 
management server for billing for said prepaid infor- 
mation medium; and 

means for providing said chargeable service io said 
terminal if both authentication and billing succeed; 
and 

wherein said prepaid informalion management server 
comprises: 

means for authenticating said prepaid informalion 
medium at said terminal upon receipt of a request for 
authentication from said coatenl server; 

means for performing the billing on the basis of usage 
of said chargeable service; and 

means for notifying said terminal of information 
including a balance of said prepaid information 
medium 

10., An article of manufacture comprising a computer 
usable medium having computer-readable code means 
embodied therein for causing, in an Internet billing system 
which makes billing on the Internet possible, in which 
system at least one terminal, at least one content server and 
at least one prepaid information management server are 
connected to a network, a computer to control said terminal, 
the computer readable code means comprising: 

computer-readable program code means for accessing 
said content server on the basis of address information 
stored in a prepaid informalion medium which has 
predetermined informalion necessary for transactions, 
and making a request for a service menu; 
computer-readable program code means for making a 
request of said content server for a chargeable service; 
computer-readable program code means for sending, 
upon receipt of a request from said prepaid information 
management server, an ID slored in said prepaid infor- 
mation medium to said prepaid information manage- 
ment server; 

computer-readable program code means for receiving 
informalion for authentication from said prepaid infor- 
mation management server, reading out a password 
stored in said prepaid information medium, performing 
a predetermined operation for a concatenated value of 
said information for authentication and the password, 
and sending a result of Ihe operation to said prepaid 
information management server; 

computer-readable program code means for writing infor- 
mation including a balance of said prepaid information 
medium to said prepaid information medium on the 
basis of notification from said prepaid information 
management server; and 

wherein said prepaid information management server 
performs the same operation as performed in said 
terminal of the concatenating value of said information 
for authentication and said password, which password 
is stored in a database, and authenticating said prepaid 
information medium by verifying a result of the opera- 
tion against the result sent from said terminal 

11. An article of manufacture comprising a computer 
usable medium having computer-readable code means 
embodied therein for causing, in an Internet billing system 
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which makes billing on the Internet possible, in which 
system at least one terminal, at least one content server and 
at least one prepaid information management server are 
connected to a network, a computer to control said content 
server, the computer readable code means comprising; 5 

computer-readable program code means for receiving a 
request for a service menu sent from said terminal on 
the basis of address information stored in a prepaid 
information medium which has predetermined infor- 
mation necessary for transactions, and sending the 30 
service menu to said terminal; 

computer-readable program code means for receiving a 
request for a chargeable service from said terminal; 

computer-readable program code means for making a 
request of said prepaid information management server 
for authentication of the prepaid information medium 
by sending a message which includes an addressof said 
terminal to said prepaid information management 
server; 20 

computer-readable program code means for billing for 
said prepaid information medium by sending a point 
number necessary for said chargeable service; and 

computer-readable program code means for providing 
said terminal with said chargeable service if both 25 
authentication and billing succeed; 

wherein, after making a request of said prepaid informa- 
tion management server for authentication by said 
content server, said prepaid information management 
server makes a request of said terminal to send an ID 30 
stored in said prepaid information medium; 

said terminal sending said ID to said. prepaid information 
management server; 

said prepaid information management server sending 35 
information for authentication to said terminal; 

said terminal performing a predetermined operation for a 
concatenated vaiue of said information for authentica- 
tion and a password which is read rxom said prepaid 
information medium, and sending a result of the opera- 4 q 
lion to said prepaid information management server; 
and 

said prepaid information management server performing 
the same operation as performed in said terminal of the 
concatenating value of said information for aulhenti- 45 
cation and said password, which password is stored in 
a database, and authenticating said prepaid information 
medium by verifying a result of the operation against 
the result sent from said terminal. 
12, An article of manufacture comprising a computer 50 
usable medium having computer-readable code means 
embodied therein for causing, in an Internet billing system 
which makes billing on the Interact possible, in which 
system at least one terminal, at least one content server and 
at least one prepaid information management server are 55 
connected to a network, a computer to control said prepaid 
information management server, the computer readable code 
means comprising: 
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computer-readable program code means for receiving a 
request for authentication of a prepaid information 
medium, used at said terminal, which prepaid informa- 
tion medium has predetermined information necessary 
for transactions, and for billing for said prepaid infor- 
mation medium; 

computer-readable program code means for making a 
request for an ID stored in said prepaid information 
medium, aad receiving the ID; 

computer-readable program code means for sending 
information for authentication to said terminal, wherein 
said terminal performs a predetermined operation for a 
concatenated value of said information for authentica- 
tion and a password and sends a result of the operation 
to said prepaid information management server; 

computer-readable program code means for receiving the 
result of the operation performed by said terminal; 

computer- readable program code means for performing 
the same operation as performed in said terminal by 
referring to a database which stores prepaid 
information, and authenticating said prepaid informa- 
tion medium by verifying a result of the operation 
against the result sent from said terminal; 

computer-readable program code means for decrementing 
a balance of said prepaid information medium by 
necessary points if the authentication succeeds; and 

computer-readable program code means for notifying said 
terminal of information which includes the decre- 
mented balance of said prepaid information medium. 

13 .An IC card, in an Internet billing system which makes 
billing on the Internet possible, in which system at least one 
terminal, at least one content server and at least one prepaid 
information management server are connected to a network, 
comprising: 

means for connecting to said terminal; 

means for reading predetermined information stored in 
said IC card, which includes a password, necessary for 
transactions; 

means for retrieving information on authentication of said 
IC card from said prepaid information management 
server; and 

means for performing a predetermined operation on the 
password and the retrieved information, sending a 
result of the operation to said prepaid information 
management server; 

means for writing information including a balance of said 
IC card to said IC card on the basis of notification from 
said prepaid information management server; and 

wherein said prepaid information management server 
performs the same operation as performed in said IC 
card for providing a concatenating value of said infor- 
mation for authentication and said password, which 
password is stored in a database, and authenticating 
said IC card by verifying a result of the operation 
against the result sent from said terminal 



